Skip to content

Add Hermes configuration audit skill - #15

Open
o-az wants to merge 11 commits into
mainfrom
feat/auditing-hermes-config
Open

o-az wants to merge 11 commits into
mainfrom
feat/auditing-hermes-config

Conversation

@o-az

@o-az o-az commented Aug 5, 2026

Copy link
Copy Markdown
Owner

Summary

  • add the reusable Hermes configuration audit skill under the canonical skills publishing layout
  • support explicit target repositories, immutable revision-pinned source evidence, conservative classifications, and safe host snapshots
  • add self-contained fixtures, output schema documentation, and JSON Schema validation

Safety

  • excludes ignored, untracked, and underscore-component source paths
  • keeps cache and reports outside inspected repositories
  • redacts scalar host values and disables import-from-derivation during Nix evaluation
  • reports unsupported dynamic and Nix structures as uncertainty

Verification

  • node --test skills/auditing-hermes-config/tests/*.test.mjs (12 passed)
  • node --check skills/auditing-hermes-config/scripts/hermes-config-audit.mjs
  • npx oxlint skills/auditing-hermes-config/scripts/hermes-config-audit.mjs skills/auditing-hermes-config/tests/audit.test.mjs
  • npx oxfmt --check skills/auditing-hermes-config
  • uvx --from skills-ref agentskills validate skills/auditing-hermes-config

The real nixos-config/Marley integration audit remains intentionally deferred.

@o-az
o-az force-pushed the feat/auditing-hermes-config branch 2 times, most recently from b0250c9 to 0e790e8 Compare August 5, 2026 16:50
@o-az
o-az force-pushed the feat/auditing-hermes-config branch from 0e790e8 to 5054842 Compare August 5, 2026 18:19
@o-az
o-az force-pushed the feat/auditing-hermes-config branch from 542e3f4 to 5f093c6 Compare August 5, 2026 23:54
const absolute = path.resolve(dir),
forbiddenRoots = [target, canonical(SKILLS_REPO), source && canonical(source)].filter(Boolean);
let ancestor = absolute;
while (!fs.existsSync(ancestor)) {
ampagent and others added 5 commits August 6, 2026 13:43
Signed-off-by: o-az <23618431+o-az@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants